Today, with the development of the internet of things in industrial control, cyber security is one of the challenges in the widespread use of systems. Microgrids are known as one of the potential targets of cyberattacks, and these cyber threats should be considered in the design of future protection systems and controllers. In this paper, a method of detecting deception cyberattacks is designed for AC microgrids. This method uses a distributed and locally implemented estimator for the secondary control layer. The estimator is utilized to extract the system information from the secondary control point of view. Based on the characteristics extracted by the estimator, cyberattacks will be identifiable before the microgrid is disrupted. The simulation results performed in the MATLAB environment show the efficiency of the proposed method.